Peter Steinberger

feat(autoreview): accept max Codex reasoning · fix: complete pinned repair validation · fix: ignore exact issue lease freshness drift · fix: isolate assist publication credentials

Prepare v0.1.1 security and release hardening · fix(search): gate exact-match rank on trust and order tiers by adoption · Search ranking lets exact name matches outrank adoption and verification (name-squat vector) · feat: add canonical request correlation

fix: persist apply reconciliation · fix: pause exact review when workflow is disabled · fix: merge concurrent sweep status updates · fix: preserve rebased state between publishes

fix: complete diagnostic credential redaction · fix: allow crabboxignore reinclude patterns · fix: reconcile idle admin sockets during maintenance · fix(worker): revoke backend agents with manager grants

feat: make AWS Bedrock provider executable · feat: add policy-driven grant routing · fix: make Parallels macOS desktop control reliable · fix(worker): revoke rotated shared-token bridges

feat: add quota-aware grant failover · feat: add deterministic upstream grant pools · test: harden dashboard browser behavior · feat: preflight Fusion readiness

fix: fail closed for unsupported Droid isolation · fix: isolate tool-less autoreview engines · feat: add autoreview model and speed defaults · feat: auto-assign verified GitHub members

fix: surface quiet-mode failures on stderr · fix: make queue owner shutdown lossless · chore(deps): bump tsx to 4.23.0 · chore(deps-dev): update development toolchain

Racked console frame and copper discipline · Patchboard console redesign · fix(scheduler): count active runs by workflow path · [codex] refill 128-worker review capacity

fix: respect active keyboard layouts · fix: bind local provider deletes to exact claims · fix: enforce W&B sandbox ownership · fix: harden managed Linux bootstrap

docs: document complete validation workflow · docs: document shared skill vision · fix: remove Ruby validator dependency · fix: normalize session viewer metadata

fix: harden agent-skills validation on Windows · [codex] Override esbuild to patched version · [codex] Update Wrangler tooling · [codex] fix SwiftPM installation example

[codex] Redesign analytics dashboard · Fix/discord bound probe getme json reads · Fix/zalo bound api json response reads · fix(cron): propagate cleanupCliLiveSessionOnRunEnd to isolated cron CLI branch

fix(vnc): resize managed Linux desktops · feat: broker native VNC workspace grants · fix(mac): fit VNC desktop to viewport · fix: request native VNC by Fleet session

feat: add native VNC handoff · fix: map local-container socket work root into container · fix: reactivate retained EC2 Mac leases · fix: wait for EC2 Mac host reuse

[codex] add macOS auto-connect launch mode · fix(aws): force EC2 Mac SSH port 22 · fix: harden cross-platform desktop provisioning · feat(mac): add auto-connect launch mode (#61)

feat: add AWS Lambda MicroVM provider · fix: surface stalled provisioning · feat(mac): add unattended private sharing · [codex] register private macOS desktop hosts

docs: note Tart SSH readiness fix · fix(worker): revoke live viewers after share removal · fix(providers): constrain credential redirects · fix(smolvm): constrain credential redirects

refactor: isolate control-plane state and console domains · refactor(admin): split console controller domains · fix: bulk provider readiness lookup · refactor: replace Rust data plane with TypeScript

fix: add Mistral embedding model · fix: transform manifest proxy requests · fix: resolve dynamic service model aliases · fix: generate route-specific playground requests

[codex] add centralized agent spend controls · fix: verify desktop helper success · fix: release failed prewarm leases · fix: revoke Code viewer sessions on logout

feat(autoreview): add Cursor review engine · fix(repair): isolate issue intake runner · feat(repair): add safe author-wide PR intake · fix(repair): harden rebase conflict retries

feat(nebius): add direct SSH lease provider · feat(scaleway): add direct SSH lease provider · feat(wandb): add reusable run sessions · [codex] Show CPU capacity in lease telemetry

fix: recover stale runtime adapter claims · fix: separate user token signing secret · fix: require orphan sweep ownership proof · fix: verify Cloudflare image GitHub CLI

fix(review): recognize dynamic exact-review run names · fix: restrict Windows credential ACLs · fix: keep collected run artifacts private · feat: add clawtributors contributor memory

fix(session-store): recover from corrupt session file in public FileSessionStore.load() · fix: preserve Codex auth in autoreview isolation · [codex] add autoreview heartbeat metrics · Harden autoreview bundle generation

fix(webvnc): force VNC password authentication · fix(coordinator): harden bridge restart recovery · fix(codesandbox): harden live lifecycle · fix(coordinator): load ssh2 in Node bundle

docs: record Cloudflare lifecycle hardening · fix: harden Cloudflare Dynamic Workers lifecycle · feat: add Crabfleet workspace adapter · [codex] fix Windows rsync fallback for local containers

test: add guarded SmolVM live smoke · fix(proxmox): support PVE 8 bridge readiness · feat(islo): expose direct SSH hostnames · fix: preserve external lease routing

fix(clickclack): allow explicit enable through plugin allowlist · feat: add coder/mux built-in adapter · fix(cli): let Claude adjudicate stale model selectors · feat(compare): add acpx compare to run one prompt across multiple agents

fix(agent): dampen Discord stale thread replies · feat(anthropic): support Claude Fable 5 adaptive thinking · chore(deps): bump useblacksmith/setup-docker-builder from 1.8.0 to 1.9.0 in the actions group · Fix Devin ACP compatibility

feat: add external lifecycle steps · fix: preserve external provider resource identity · Setup real E2E testing with Docker and Parallels for automated smoke testing · Codify subsystems / responsibilities in CONTRIBUTING.md

refactor: move session metadata to SQLite · build(deps-dev): bump the development-minor-and-patch group with 3 updates · build(deps): bump the production-minor-and-patch group with 13 updates · build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 in the github-actions group

refactor(plugin-sdk): persist dedupe state in sqlite · refactor: store Zalo hosted media in plugin state · fix: preserve live Ollama catalog metadata · fix: migrate legacy agent registry schema via doctor

fix: store device-pair notify state in sqlite · fix: store acpx process state in sqlite · fix(worker): fail closed on invalid SSH CIDRs · feat(sync): add sync.include whitelist

build(deps): bump the production-minor-and-patch group across 1 directory with 12 updates · build(deps): bump commander from 14.0.3 to 15.0.0 · build(deps-dev): bump the development-minor-and-patch group across 1 directory with 5 updates · build(deps): bump the github-actions group with 3 updates

feat(matrix): handle voice preflight and threads · Fix ClickClack toolsAllow reply dispatch · feat: expose node-hosted plugin tools · refactor: remove Feishu runtime dedupe JSON fallback

chore(release): update appcast for 2026.6.1 · fix: keep stream-to-parent spawns registered · docs: document auth profile failure policy contract · fix(agents): classify read-only shell commands as non-mutating

docs: document auth profile failure policy contract · docs: document replay history normalization contract · fix: migrate QQBot credential backups to SQLite KV · docs: document embedded compaction context contracts

Fix live model inference edge cases · docs: document reusable helper contracts · docs: document markdown and shared helpers · refactor(auth): store auth profiles in SQLite

perf: streamline chat startup metadata · docs: document cli command path helpers · Persist plugin install index in SQLite · Migrate iMessage monitor state to SQLite

refactor(telegram): persist plugin state in sqlite · fix: clarify generated media reply prompts · fix(heartbeat): advance stale scheduler deferrals · refactor: narrow memory host runtime adapters

feat: add internal code mode namespaces · docs: add inline code comments · refactor: extract media generation core package · refactor: extract LLM core packages

fix(agents): attribute embedded tool logs to channels · fix: scope jiti transform cache by OpenClaw install · fix(codex): defer report-mode plugin approvals · fix(memory): compact short-term promotion entries

fix(hooks): enforce default hook agent allowlist · fix(qqbot): gate fallback approval buttons · fix(agents): wait for compaction before requester steering fallback · fix: stabilize isolated cron prompt cache affinity

fix(cli-runner): scale Claude CLI reseed history automatically · fix(agents): disclose scoped session list results · fix(status): surface systemd gateway hygiene · fix(web-search): keep runtime legacy merge out of validation

fix(security): audit Claude permission overrides under YOLO · fix(codex): honor yolo app-server approval policy · fix(pi-runner): flush block replies after compaction retry · fix(agents): release embedded-attempt session lock on every exit path

fix(codex): ensure codex subagent bootstrap parity with pi subagents - only inject AGENTS.md and TOOLS.md · Clean up browser MCP subprocess tree · fix(agents): log warnings instead of swallowing subagent errors · fix(compaction): preserve partial summary on mid-chain chunk failure

fix(sandbox): mount workspace skills read-only · fix(channels): honor /verbose in group sessions · fix(agents): omit empty tools array for proxy-like openai-completions endpoints · perf(utils): preserve message identity in stripInlineDirectiveTagsFromMessageForDisplay

feat: add meeting notes plugin · feat: add Workboard dashboard plugin · build(pnpm): use packageManager as pnpm source · refactor: internalize OpenClaw agent runtime

Add openclaw skills verify for ClawHub trust cards · chore: harden npm shrinkwrap release path · fix(webchat): persist message tool source replies · refactor: remove sender owner tool gating

fix: bump baileys · fix: clarify pinned session model status · feat(discord): add realtime voice bootstrap context · feat(discord): follow configured users in voice

fix(codex): expose sandbox shell tools for ssh backends · ci(release): stabilize beta validation gates · test(plugins): update prerelease shard expectations · ci: cancel duplicate Tideclaw alpha release runs

codex: surface deferred dynamic tool names · fix(messages): keep group visible replies automatic by default · fix(update): harden legacy package handoff · fix(config): share subagent model schema

feat(browser): surface observed dialogs · [codex] Add presentation capability limits · fix(gateway): isolate hot reload channel failures · feat: add crawl archive skills

feat: add fal and OpenRouter music generation · fix(memory): abort timed-out embedding requests · Build issue-to-PR Codex work sessions with dashboard status and abort · Refactor inbound room events into core

feat: add xAI Grok OAuth · fix: clarify provider timeout ceiling · [codex] Unify OpenAI auth provider picker · fix(auto-reply): abort active text stop runs

fix: keep command cron turns lightweight · fix: require heartbeat response tool delivery · fix(web): keep legacy Brave search fallback provider-owned · Remove codex-cli backend and migrate to Codex runtime

refactor: move runtime state to SQLite · fix: plan managed npm peer pins with npm · [codex] use in-process subagent announce handoff · fix(agents): surface memory-flush errors safely

fix: skip metadata for build-excluded bundled plugins · fix local plugin TS source discovery · fix(update): mandatory post-core plugin convergence before gateway restart · fix(doctor): repair managed plugin openclaw peer links

[codex] Add generic OpenClaw code mode · fix(codex): expose sandbox shell tools · fix: constrain Codex app-server sandbox · fix: honor configured media generation timeouts

Prioritize foreground command queue work · fix(agents): suppress raw subagent tool output · [plugin sdk] consolidate host workflow seams · fix(heartbeat): prevent ack-only pending delivery loops

feat(slack): expand message action parity · feat: add core tool search · fix: install Codex for OpenAI onboarding · refactor: use PI Codex Responses transport

refactor: replace core oc-path with bundled plugin · feat(discord): add realtime voice modes · fix(pairing): preserve narrowed token scopes on upgrade · Pairing scope upgrades can widen narrowed role tokens

refactor: centralize channel ingress access · fix(openai): use GA realtime bridge for gpt-realtime-2 · fix: share plugin runtime helpers · Expand native sqlite Kysely adapter tests

fix(channels): list channel catalog status · Experiment with agent worker runtime isolation · Refactor runtime state into SQLite · [codex] fix stale managed npm cleanup on uninstall

fix: clarify group mentions target other people · feat: redesign control overview dashboard · Explore per-agent worker isolation, VFS scratch storage, and host filesystem capabilities · fix: honor embedded runtime tool allowlists

[codex] Fix missing channel plugin diagnostics · [codex] add gateway stall diagnostics · fix(secrets): degrade stale auth profile refs on startup · fix(slack): tag gateway failure echoes

[codex] Queue subagent completion announces · fix: isolate WhatsApp direct sessions by account · docs: standardize behavior spelling in ACP agents doc · Refactor command analysis for exec approvals

[codex] Fallback when Windows gateway task exits early · [codex] Fix doctor completion cache plugin loading · [codex] Fix Anthropic Vertex npm audit regression · fix(diagnostics): experiment with stuck session aborts

fix(signal): keep quiet SSE receive streams open · fix: raise hosted image generation timeouts · docs: consolidate remote testing around Crabbox · fix(discord): harden Carbon parity

Track Codex app-server terminal notification hardening · Prefer Codex native workspace tools · fix: simplify bundled runtime dependency repair · test: add published upgrade survivor lane

fix(agents): route async media completions through wake media · [codex] Route generated media through assistant delivery · test: exercise Clownfish any-PR automerge opt-in · fix(gateway): keep native approvals off stale pairing baselines

refactor(memory-host): replace core runtime bridge with services · feat(android): add authenticated presence alive beacons · feat: add authenticated iOS background presence beacon · fix(google-meet): harden observe mode speech health

feat(providers): add DeepInfra provider plugin · fix: allow trusted-proxy local password fallback · fix: harden Bonjour DNS label truncation · fix(agents): normalize Windows runtime imports

fix: keep system events from extending session resets · perf(plugins): use native require for compiled JS before jiti · fix(gateway): refresh install when loaded service embeds gateway token · feat(voicewake): trigger-based routing to agent/session

fix(image): resolve provider-prefixed configured models · feat(litellm): add image generation provider · fix: suppress silent cron exec completion noise · fix(qqbot): schedule reminders through cron gateway

fix(webchat): keep runtime context out of visible transcripts · fix(models): separate Codex harness from model choices · fix(runner): throw FailoverError on assistant surface_error so webchat renders provider failures · feat(deepseek): support v4 models

[maintainer created] Thai translation feedback · fix(agents): preserve spoken text in tts tool result · fix: cap long SDK retry-after waits · fix(auto-reply): restore route replies for exec-event completions

fix(auto-reply): reassemble MEDIA: directives split across streaming chunks · fix(agents): use atomic store helper for CLI session clearing · fix(memory-core): suppress startup "cron service unavailable" warning (closes #69939) · fix: restore Pi embedded tool allowlist for GPT-5 runs

session: clear auto-sourced model/auth overrides on /new and /reset · fix(codex): default app-server approvals to on-request · fix(ollama): inject default baseUrl and models during normalization to unblock implicit discovery #69085 · fix(ollama): register media-understanding provider so image tool routes ollama/* vision models

docs(plugins): add Prometheus Avatar community plugin · fix(codex/app-server): release session lane when projector throws on turn/completed · fix(pi-embedded-runner): retry silent stopReason=error turns (non-frontier models) · fix(telegram): add client-side timeout to #confirmPersistedOffset getUpdates

test: complete workspace setup in update smokes · test: make OpenWebUI smoke deterministic · test: tolerate empty fireworks live responses · fix: stabilize release smoke reruns

fix(telegram): avoid wedging callback updates on permanent edit errors · fix(google): strip thinkingBudget=0 for gemini-2.5-pro thinking-required model · fix: [codex-harness] avoid treating cumulative app-server usage as current context · Fix: auto-allowlist configured CDP hostnames in SSRF policy (Resolves #68108)

test: type runtime auth overlay mock · test: stub channel migration setup surfaces · test: trim agent test hot spots · test: isolate browser facade cache tests

fix(errors): stop treating Codex HTML challenge pages as DNS failures · fix(agents): add compat.supportsPromptCacheKey to opt out of prompt_cache_key strip · fix(skills): sort available_skills alphabetically for prompt cache stability · fix(prompt): keep inbound chat ids out of system prefix

test(parallels): clean up npm update guard jobs · fix(release): allow legacy qa sidecar verification · fix(qa): use exported runner sdk seam · test: harden gateway live docker flake handling

build: prune non-runtime bundled dependency cargo · Modernize showcase docs page · Refresh showcase and press sections · build: refresh release surface baselines

fix(gateway): defer cron/heartbeat activation until sidecars ready (#65322) · test: align failover source model expectation · chore: fix pulled lint assertion · fix: normalize OpenAI minimal reasoning

chore(release): prepare 2026.4.12-beta.1 · fix(plugins): tolerate bundled peer resolution · fix(test): remove duplicate trace directive fixtures · fix(test): align trace directive type stubs

benchmarks: add first-wave GPT-5.4 vs Opus 4.6 parity harness · fix: Implicit latest-device approval can pair the wrong requester · agents: add OpenAI/Codex tool compatibility and replay/liveness state · openai-codex: classify runtime failures and make full access truthful

fix(text): strip Qwen-style XML tool call payloads from visible text (#63999) · fix(daemon): prevent systemd restart storm on config validation failure [AI-assisted] · fix(config): add timeoutSeconds support to agents.defaults.heartbeat · fix(config): give actionable guidance when command names are used in plugins.allow (#64191)

plugin-sdk: keep command-auth status compatibility path light · style: format web fetch ssrf test · fix(feishu): read webhook bodies through pre-auth guard · test: allow slower CLI metadata help rendering

fix(slack): honor HTTPS_PROXY for Socket Mode WebSocket connections · fix(zai): default to GLM-5.1 instead of GLM-5 · fix(doctor): warn when stale Codex overrides shadow OAuth · fix(daemon): skip machine-scope fallback on permission-denied bus errors

fix(channels): keep bundled dist loads off native Jiti on Windows · test: fold identity defaults into existing config suites · test: trim config defaults and secrets refresh coverage · fix: respect disabled heartbeat guidance

fix(discord): restore voice receive path and reply playback · feat: add Arcee AI provider plugin · [codex] stabilize media live coverage and add a shared harness · fix(ssrf): disable HTTP/2 for pinned dispatchers (undici 8.0)

[codex] Embed ACP runtime in plugin · fix(slack): route live DM replies to the concrete DM channel · fix(anthropic): reuse claude-cli native auth at runtime · Fix Claude CLI bootstrap injection coverage

fix(usage): improve MiniMax coding-plan usage parsing for model_remains array · fix(gateway): preserve caller scopes for identity-bearing gateway-auth plugin routes [AI] · fix(browser): disconnect Playwright CDP session on stop for attachOnly profiles · fix(browser): remove fromSurface: false for Chrome 146+ screenshot compat

fix(agents): fall back to defaults for subagents.allowAgents · fix(tools): normalize truly empty MCP tool schemas for OpenAI · fix(telegram): avoid checking same model id across providers · Gateway: disconnect shared-auth sessions when auth changes

fix(telegram): keep allow-always approval action under callback_data limit · fix: evaluate shell wrapper inline compound commands against allowlist (#57377) · fix: recover broken auth state and improve sign-in errors · Security: block exec host overrides when tools.exec.host is auto

fix(auth): ensure credential key and token fields are strings during store load · fix: catch per-stage errors in HTTP request pipeline to prevent cascade 500s · fix(agents): normalize provider errors for better failover · fix(exec): resume agent session after approval completion

fix: normalize MCP tool schemas missing properties field for OpenAI Responses API · Codex: add native web search for embedded Pi runs · fix: omit disabled OpenAI reasoning payloads · build: move pnpm minimum release age to workspace config

fix(ci): restore docs formatting and slack test typing · docs: add exec approval troubleshooting · fix: stabilize ci task and docs checks